METHOD AND APPARATUS FOR VEHICLE SOFTWARE UPDATE INSTALLATION

• US 20170242678A1
• Filed: 02/19/2016
• Published: 08/24/2017
• Est. Priority Date: 02/19/2016
• Status: Active Application

• Current Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Original Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Inventors: SANGAMESWARAN, Sangeetha, MILLER, Jason Michael, VANGELOV, John Naum, HAMILTON, Brennan
• Application Number:
  US15/047,715
• Publication Number:
  US 20170242678A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/656 while running
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A system includes a processor configured to detect a vehicle key-off. The processor is also configured to delete from a primary memory (“internal memory”) of an electronic control unit an existing software version for which a new software version update exists in a secondary memory of the ECU. The processor is further configured to load the new software version from the secondary memory (“external memory”) into the primary memory and upon detection of a failure during the load, delete the new software version from the primary memory and reload the existing software version from the secondary memory.

Claims

1. A system comprising:

a processor configured to;

detect a vehicle key-off;

delete from a primary memory of an electronic control unit an existing software version for which a new software version update exists in a secondary memory of the ECU;

load the new software version from the secondary memory into the primary memory; and

upon detection of a failure during the load, delete the new software version from the primary memory and reload the existing software version from the secondary memory.

2. The system of claim 1, wherein the processor is further configured to test the new software version following successful load to the internal memory.

3. The system of claim 2, wherein the processor is further configured to delete the new software version from the primary memory and reload the existing software version from the secondary memory upon detection of an error during the test.

4. The system of claim 1, wherein the processor is further configured to delete the new software version from the primary memory and reload the existing software version from the secondary memory if an error occurs when an electronic control unit attempts to utilize the new software version.

5. The system of claim 1, wherein the processor is configured to suspend drivability of the vehicle during the delete and the load.

6. The system of claim 1, wherein the processor is configured to reload the existing software version from a location in the secondary memory in which an update resulting in the existing software version was previously stored when the existing software version was first loaded.

7. The system of claim 1, wherein the processor is configured to copy the existing software version to the secondary memory from the primary memory prior to deleting the existing software version, if the existing software version does not already exist in the secondary memory.

8. A computer-implemented method comprising:

deleting from internal memory an existing software version for which a new software version update exists in external memory in response to a vehicle key-off event;

loading the new software version into the internal memory from the external memory; and

responsive to a failure in the loading, deleting the new software version from the internal memory and reloading the existing software version from the external memory.

9. The method of claim 8, further comprising testing the new software version following successful loading of the new software version into the internal memory.

10. The method of claim 9, further comprising deleting the new software version from the internal memory and reloading the existing software version from a location where the existing software version exists in the external memory responsive to an error during the testing.

11. The method of claim 8, further comprising deleting the new software version from the internal memory and reloading the existing software version from a location where the existing software version exists in the external memory responsive to an error occurring when an electronic control unit attempts to utilize the new software version.

12. The method of claim 8, further comprising suspending drivability of the vehicle during the deleting and the loading.

13. The method of claim 8, wherein the reloading includes reloading the existing software version from a location in external memory in which an update resulting in the existing software version was previously stored when the existing software version was first loaded.

14. The method of claim 8, further comprising copying the existing software version to the external memory prior to deleting the existing software version, if an update corresponding to the existing software version does not already exist in the external memory.

15. A non-transitory computer-readable storage medium, storing instructions which, when executed, cause a vehicle processor to perform a method comprising:

deleting an existing software version from internal memory if a new software version update exists in external memory in response to a vehicle key-off event;

loading the new software version into the internal memory from the external memory; and

responsive to a failure in the loading, deleting the new software version from the internal memory and reloading the existing software version from a location where the existing software version exists in the external memory.

16. The storage medium of claim 15, the method further comprising testing the new software version following successful loading of the new software version to the internal memory.

17. The storage medium of claim 16, the method further comprising deleting the new software version from the internal memory and reloading the existing software version from a location where the existing software version exists in the external memory responsive to an error during the testing.

18. The storage medium of claim 15, the method further comprising deleting the new software version from the internal memory and reloading the existing software version from a location where the existing software version exists in the external memory responsive to an error occurring when an electronic control unit attempts to utilize the new software version.

19. The storage medium of claim 15, the method further comprising suspending drivability of the vehicle while any deleting and loading is ongoing.

20. The storage medium of claim 15, the method further comprising copying the existing software version to the external memory prior to deleting the existing software version, if an update corresponding to the existing software version does not already exist in the external memory.